Free Malware Removal Forum

Welcome to MalwareRemoval.com,What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Hi, I installed the RiyoCodec from Riyocodec.com live link edited due to it linking to malware, Nick Since then when I open a link from search result using control left click, it redirect me to a pron site. The following is the output from the Hijackthis. Please help.

Hi mayi, thank you for your help. This is not to urge you to hasten your research. I just wish you ask another favour. Could you please also reaserch whether I need to run HP's cloaker.exe twice. I am curious on why two entries for cloaker.exe from HiJackThis.log?

Mayi, Thank you for your help. I have executed the recommended procedure. Before I post the log, I just let you know that Fixware asks me to ket you know there is a file call dnsbak.reg created. Do you want me to post it. It is very long. Second, I have removed a compule of files called kdryh.exe and kdmad.exe which were created by one of the user account in c:\winodws\system32. They are fishy. There are also a few files keep on coming back called in the System32 directory called edjigaeeeaaf.*. Regarding the cloaker.exe, I do not know what is its use and I don't use it. I think it comes with the HP PC.

!!! Warning, this report may include legitimate files/programs !!!
!!! Post this report on the forum you are being helped !!!
!!! Don't continue with removal unless instructed by an authorized helper !!!
Fix running from C:\Program Files\navilog1
Updated on 03.10.2007 at 20h00 by IL-MAFIOSO

Hello Mayi, I may have done something wrong. I follow the procedure. Navilog did not restart the computer. I restarted as your instruction. After I log on for half an hour, there was no completion message. Desktop show as soon as I logged on. All this was done from the usual account which is not an admin account. Please advise next step.

Hello Mayi, The Hijackthis log I posted was created from the usual account I use day to day. I have compare it with the one from the admin account. They do have differences. The following is the one generated from the admin account. Could you please advise should I run all the scan and fix using my regular account which is no admin privilege, admin account or in save mode. Thank you.

Who is online

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.